{
 "server": "com.trysuara/suara",
 "url": "https://mcp.trysuara.com/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 12,
 "tools_ever_seen": 12,
 "drift_events": 12,
 "findings_by_severity": {
  "critical": 1,
  "high": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 12,
  "ran_at": "2026-10-24T18:17:44.369Z"
 },
 "current_tools": [
  "approve_post",
  "best_time_to_post",
  "connect_social_account",
  "get_my_brand",
  "get_my_posts",
  "get_suara_replies",
  "holiday_calendar",
  "make_sample_posts",
  "my_instagram_insights",
  "my_social_accounts",
  "send_to_suara",
  "trending_audio"
 ],
 "drift": [
  {
   "tool": "make_sample_posts",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "trending_audio",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "holiday_calendar",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "best_time_to_post",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "get_my_brand",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "get_my_posts",
   "kind": "added",
   "severity": "critical",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "send_to_suara",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "get_suara_replies",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "approve_post",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "connect_social_account",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "my_social_accounts",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "my_instagram_insights",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-24T18:17:44.369Z"
  }
 ],
 "findings": [
  {
   "tool": "get_my_posts",
   "detector": "exfiltration_pattern",
   "severity": "critical",
   "field": "inputSchema.properties.images.description",
   "evidence": "Also attach the pictures to the answer (default false: the Suara viewer shows them)",
   "seen_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "send_to_suara",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_suara_replies'",
   "seen_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "get_suara_replies",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'send_to_suara'",
   "seen_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "tool": "connect_social_account",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "orm's own login page; Suara never sees their password. Instagram must be a Business or Creator account. Nothing is pos",
   "seen_at": "2026-10-24T18:17:44.369Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 12,
   "ran_at": "2026-10-24T18:17:44.369Z"
  }
 ]
}